Laser Check Printing File Security

 3 Replies
 0 Subscribed to this topic
 43 Subscribed to this forum
Sort:
Author
Messages
Brian
New Member
Posts: 4
New Member
    We had a problem with check fraud when an A/P clerk edited the AP161 electronic payment flat file.

    I cannot lock down the A/P users folder rights because our laser printing software will crash when removing the file after importing.

    How do others handle this security hole?

    Thanks,
    Brian
    John Henley
    Posts: 3353
      One technique I have used is to create the job and not open add access on that token (i.e., locking out any users from creating a different job). AP users who use the job can just submit it. Then admin with access can change work or report file location to a more discrete location, which can be secured appropriately. Not sure if that will work for AP161 or not, but hope that gives you some help. Sorry to hear about the fraud.
      Thanks for using the LawsonGuru.com forums!
      John
      Brian
      New Member
      Posts: 4
      New Member
        Thinking about it over night I think the only solution is to try and get the Laser Check software vendor to change their application to not delete the file after importing and not allow the users to browse for the import file.
        Then I can set the directory to read only and have a static location that only I can modify from within the Laser Check Printing software. The security hole will exist as long as users are able browse and select the import file because they can simply copy it to their desktop and edit it.
        I guess you can work next to people for years and not really know them. What a slap in the face after helping her with her job for many years.
        Adam Jacobson
        Veteran Member
        Posts: 69
        Veteran Member
          it's been a while but at some time we modified the program to automatically FTP the file after creation to a secure location where the software can find it but no one else can.
          I don't quite understand your situation - but I have locked this down before so it should be possible.